Archive
23 January 2020
Vulnerabilities first published on this day (UTC), newest first.
78 results · Feed
-
Unscored —
A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow atta…
-
High 7.5
Undertow vulnerable to Uncontrolled Resource Consumption
A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL.
-
High 7.7
Local privilege escalation from user munge to root
A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge …
-
Unscored —
Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0.
-
Medium 6.2
apt-cacher-ng insecure use of /run/apt-cacher-ng
The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng …
-
Unscored —
mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname.
-
Unscored —
Splunk 5.0.3 has an Unquoted Service Path in Windows for Universal Forwarder which can allow an attacker to escalate pr…
-
Unscored —
Splunk before 5.0.4 lacks X-Frame-Options which can allow Clickjacking
-
Unscored —CVE-2013-6792 Public exploit
Google Android prior to 4.4 has an APK Signature Security Bypass Vulnerability
-
Unscored —
The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS
-
Unscored —CVE-2020-7931 Public exploit
In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modi…
-
Unscored —
Toshiba ConfigFree 8.0.38 has a CF7 File Remote Command Execution Vulnerability
-
Unscored —
PrestaShop 1.5.5 allows remote authenticated attackers to execute arbitrary code by uploading a crafted profile and the…
-
Medium 6.1
Cross-Site Scripting in sanitize-html
sanitize-html before 1.4.3 has XSS.
-
Unscored —CVE-2013-4175 Public exploit
MySecureShell 1.31 has a Local Denial of Service Vulnerability
-
Unscored —CVE-2013-6785 Public exploit
Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attacke…
-
Unscored —
mysecureshell 1.31: Local Information Disclosure Vulnerability
-
Unscored —CVE-2012-5698 Public exploit
BabyGekko before 1.2.4 has SQL injection.
-
Unscored —CVE-2012-5699 Public exploit
BabyGekko before 1.2.4 allows PHP file inclusion.
-
Unscored —
-
High 7.7
trousers: Local privilege escalation from tss to root
UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 tr…
-
Unscored —
Corel WordPerfect Office X6 16.0.0.388 has a DoS Vulnerability via untrusted pointer dereference
-
Unscored —
ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface.
-
Unscored —
-
Unscored —
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST req…
-
Unscored —CVE-2019-19838 EPSS 24%
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST req…
-
Unscored —
Zoho ManageEngine ServiceDesk Plus 11.0 Build 11007 allows XSS. This issue was fixed in version 11.0 Build 11010, SD-83…
-
Unscored —
SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of ser…
-
Unscored —
Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote inform…
-
Medium 4.3
Umbraco CMS vulnerable to CSRF
Umbraco CMS 8.2.2 allows CSRF to enable/disable or delete user accounts.
-
Medium 4.4
Limited header injection when using dynamic overrides with user input in RubyGems secure_headers
In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.9.0, 5.2.0, and 6.3.0. If user-supplied input was passed into append/override_content_security_policy_directives, a newline could be injected leadi…
-
Medium 4.4
Directive injection when using dynamic overrides with user input in RubyGems secure_headers
In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.8.0, 5.1.0, and 6.2.0. If user-supplied input was passed into append/override_content_security_policy_directives, a semicolon could be injected lea…
-
Medium 6.1
Persistent XSS vulnerability in filename of attached file in PrivateBin
In PrivateBin versions 1.2.0 before 1.2.2, and 1.3.0 before 1.3.2, a persistent XSS attack is possible. Under certain conditions, a user provided attachment file name can inject HTML leading to a persistent Cross-site scripting (XSS) vulnerability. The vulner…
-
Unscored —
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the bl…
-
Critical 9.8
Insecure Deserialization in Apache XML-RPC
An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-R…
-
High 8.2
FastTrack Admin By Request 6.1.0.0 supports group policies that are supposed to allow only a select range of users to e…
-
Critical 9.0
FastTrack Admin By Request 6.1.0.0 supports group policies that are supposed to allow only a select range of users to e…
-
Medium 5.4
A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential information of the system …